Update policy record from enrollment webhooks same day

Your enrollment webhooks miss matching policy rows, leaving statuses stale and blocking billing. It writes status and timestamp to the policy row so operations can act same day.